Wpengine Wpgraphql
5 CVEs affecting Wpengine Wpgraphql. Latest disclosed: 2024-01-16. Critical: 2, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-9879 | Critical | 9.8 | 2019-06-10 | The WPGraphQL 0.2.3 plugin for WordPress allows remote attackers to register a new user with admin privileges, whenever new user registrations are allowed. Thi… |
CVE-2019-9880 | Critical | 9.1 | 2019-06-10 | An issue was discovered in the WPGraphQL 0.2.3 plugin for WordPress. By querying the 'users' RootQuery, it is possible, for an unauthenticated attacker, to ret… |
CVE-2022-1563 | Medium | 5.3 | 2024-01-16 | The WPGraphQL WooCommerce WordPress plugin before 0.12.4 does not prevent unauthenticated attackers from enumerating a shop's coupon codes and values via Graph… |
CVE-2019-9881 | Medium | 5.3 | 2019-06-10 | The createComment mutation in the WPGraphQL 0.2.3 plugin for WordPress allows unauthenticated users to post comments on any article, even when 'allow comment'… |
CVE-2023-23684 | Medium | 4.4 | 2023-11-13 | Server-Side Request Forgery (SSRF) vulnerability in WPGraphQL.This issue affects WPGraphQL: from n/a through 1.14.5. |